A security analyst is performing an authorized assessment of a web server. A SYN scan shows ports 22, 80, and 443 open. The analyst wants to determine which services are actually listening and their versions without causing disruption. Which technique should the analyst use next?

Review the ARP cache of the local machine

Perform service enumeration with version detection on the open ports

Execute a ping sweep against the entire subnet

Run a full connect scan on all 65535 ports

A security analyst is conducting passive reconnaissance on a target organization. The analyst has gathered information from public sources but needs to identify the technologies used on the target's web servers without sending any packets to the target. Which method is most appropriate?

Use a search engine to find cached versions of the target's web pages and examine the HTML headers.

Perform a port scan on the target's web servers.

Send a crafted HTTP request to the target's web server.

Use a vulnerability scanner to identify web technologies.

A security team uses an automated vulnerability scanner that generates a large number of findings each week. The team is overwhelmed and cannot remediate all findings. Which approach is most effective for prioritizing remediation?

Remediate only the easiest findings to reduce the count quickly.

Prioritize based on the CVSS score and the criticality of the affected asset.

Ignore all findings with a CVSS score below 9.0.

Remediate findings in the order they are reported.

A vulnerability scan of a web server identifies a critical SQL injection flaw in a custom application. The development team says a patch will take two weeks to develop. The server is internet-facing and must remain available. Which action should the security team take first?

Implement a web application firewall rule to block SQL injection attempts.

Take the server offline until the patch is ready.

Ask the developer to rewrite the application immediately.

Ignore the finding until the patch is ready.

A vulnerability scan reveals that a legacy application has an unpatched remote code execution vulnerability. The vendor no longer provides patches. The application is critical to business operations and cannot be replaced. Which mitigation strategy is most appropriate?

Segment the network and restrict access to the application to only authorized users.

Run the application with administrative privileges to improve performance.

Disable the application until a replacement is found.

Ignore the vulnerability because the vendor no longer supports the product.

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 4Objective 1

Explain Vulnerability Management 100-160 Practice Questions (Page 5)

Part of the Vulnerability Assessment and Risk Management domain, which makes up ~20% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 21–25

21application · medium
A security analyst is performing an authorized assessment of a web server. A SYN scan shows ports 22, 80, and 443 open. The analyst wants to determine which services are actually listening and their versions without causing disruption. Which technique should the analyst use next?
Select an answer first
22expert · hard
A security analyst is conducting passive reconnaissance on a target organization. The analyst has gathered information from public sources but needs to identify the technologies used on the target's web servers without sending any packets to the target. Which method is most appropriate?
Select an answer first
23expert · hard
A security team uses an automated vulnerability scanner that generates a large number of findings each week. The team is overwhelmed and cannot remediate all findings. Which approach is most effective for prioritizing remediation?
Select an answer first
24application · medium
A vulnerability scan of a web server identifies a critical SQL injection flaw in a custom application. The development team says a patch will take two weeks to develop. The server is internet-facing and must remain available. Which action should the security team take first?
Select an answer first
25application · medium
A vulnerability scan reveals that a legacy application has an unpatched remote code execution vulnerability. The vendor no longer provides patches. The application is critical to business operations and cannot be replaced. Which mitigation strategy is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.